I don't think this is a bug. In 6.3, the filter inherits orgs and locs from it's role unless you make it overriding. Therefore you should either update the hammer command so it includes "--override true" or assign the org and loc on role level.
I'd suggest consulting this with Kedar who tested the Org admin feature and might have already automated this too.

Tomas, how complicated would it be to add a custom warning to the filter create hammer command that would be printed only if the override value was not set but some orgs/locs were specified? If it's doable relatively easily I think that would be the right fix for this usability issue. Also I'm happy to do it if you provide me a guidance.

It should be relatively simple. 4 lines of code for create command, a bit more for update. I created and attached upstream issue.

I think we should improve parameter descriptions in API too, because at the moment they don't mention relation between orgs/locs and override either.

Upstream bug assigned to tstrachota

Upstream bug assigned to tstrachota

Moving this bug to POST for triage into Satellite 6 since the upstream issue http://projects.theforeman.org/issues/17730 has been resolved.

after the fix when creating the organizations and locations are returned
>>> hammer -v --output=csv filter create --override="1" --organization-ids="544" --role-id="161" --location-ids="545" --permissions="view_users,create_users,edit_users,destroy_users"
<<<
Message,Id
Permission filter for [User] created,546

>>> hammer filter info --id="546"
<<<
Id:            546
Resource type: User
Search:        none
Unlimited?:    no
Override?:     yes
Role:          i4LRib
Permissions:   view_users, create_users, edit_users, destroy_users
Locations:     
    JcvflQFNae
Organizations: 
    ltUeA0
Created at:    2017/06/23 07:08:03
Updated at:    2017/06/23 07:08:03
_______________________________________________________________________

But when updating the fields Locations and Organizations are not returned

>>> hammer filter update --organization-ids="546" --override="1" --location-ids="547" --id="546" --permissions="view_users,create_users,edit_users,destroy_users"
<<<
Message,Id
Permission filter for [User] updated,546

>>> hammer filter info --id="546"
<<<
Id:            546
Resource type: User
Search:        none
Unlimited?:    yes
Override?:     yes
Role:          i4LRib
Permissions:   view_users, create_users, edit_users, destroy_users
Created at:    2017/06/23 07:08:03
Updated at:    2017/06/23 07:08:36

I found out the functionality for resetting taxonomies when switching override to false is broken and erases them even when override is true.

See http://projects.theforeman.org/issues/20117 for more details.

I have a patch ready, switching the bug back to Assigned.

Marking the BZ as post, as the new patch was merged upstream

The change has been released with hammer-cli-foreman 0.11.0 and it will be rebased.

VERIFIED

Version Tested:
Satellite-6.3 Snap 17

steps:

# hammer --output=csv role create --name="role-1"
Message,Id,Name
User role [role-1] created,25,role-1

# hammer --output=csv organization create --name="org-1"
Message,Id,Name
Organization created,4,org-1

# hammer --output=csv location create --name="loc-1"
Message,Id,Name
Location created,5,loc-1

# hammer --output=csv filter create --organization-ids="4" --role-id="25" --location-ids="5" --permissions="view_users,create_users,edit_users,destroy_users"
Could not create the permission filter:
  Error: Organizations and locations can be set only for overriding filters
  
  See: 'hammer filter create --help'

# hammer --output=csv filter create --organization-ids="4" --role-id="25" --location-ids="5" --permissions="view_users,create_users,edit_users,destroy_users" --override true
Message,Id
Permission filter for [User] created,270

# hammer filter info --id="270"
Id:            270
Resource type: User
Search:        none
Unlimited?:    no
Override?:     yes
Role:          role-1
Permissions:   view_users, create_users, edit_users, destroy_users
Locations:     
    loc-1
Organizations: 
    org-1
Created at:    2017/09/24 10:10:25
Updated at:    2017/09/24 10:10:25

________________________________________________________________________________

When update org/loc >>>

# hammer filter update --organization-ids="1" --override true --location-ids="2" --id="270" --permissions="view_users,create_users,edit_users"
Permission filter for [User] updated

# hammer filter info --id="270"
Id:            270
Resource type: User
Search:        none
Unlimited?:    no
Override?:     yes
Role:          role-1
Permissions:   view_users, create_users, edit_users
Locations:     
    Default Location
Organizations: 
    Default Organization
Created at:    2017/09/24 10:10:25
Updated at:    2017/09/24 10:15:58


Hammer filter info successfully showed org and loc. When there is org and loc parameter and --override value is not set, it showed warning("Organizations and locations can be set only for overriding filters") as per comment #2. After updating org/loc, hammer filter info showed org/loc.

Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA.

For information on the advisory, and where to find the updated files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2018:0336